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(57) Abstract 

In a method for providing copy-protection services on a storage medium (for instance a solid state memory module), the data are 
arranged in sectors to which a field (S4T) is associated, where said field contains a random value Ri which is changed randomly when 
writing data to said sector. By encrypting the data stored on the medium using a key which depends critically on said random numbers, 
bit-by-bit copies (apart from said random numbers, which can not be deterministically changed by an application) to a second storage 
medium or recopies from some intermediate storage medium, can not be decrypted because the values of said random numbers will have 
changed, thus preventing unauthorized duplication and replay attacks. 
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A method and system for providing copy-protection on a storage medium and storage 
medium for use in such a system. 



The invention relates to a method for providing copy-protection to a data 
storage medium, in particular to solid state memory modules. The method is in particular 
useful for, but not restricted to, devices in which a removable random access memory module 
can be inserted such as for instance portable play back devices. With advancing technology, 
5 next generations of portable audio playback and recording devices will be based on solid 
state technology. Arguments in favor are based on weight, power and shockproofhess 
considerations. 

Software providers, e.g. music publishers, require measures against 
unauthorized copying of the digitally stored information, with little or preferably no 
10 inconvenience to an authorized user. In addition, the method and system should support such 
business models as rental, try-before-you-buy, and controlled copying (e.g. super 
distribution). A particular problem is posed by devices that can potentially access all 
information on the storage media, without complying with protection standards. 

It should be prevented to make perfect bit copies of the storage medium such 
1 5 that the duplicates both play simultaneously in different players. 

A solution to this requirement is to encrypt the data (for instance audio) using 
a property of the storage media (for instance removable solid state memory modules) which 
is unique for each storage medium and which cannot be changed. For example, one could 
encrypt audio data using a key which is derived at least in part from a "module ID" which 
20 cannot be modified by a user, where the module ID is a fixed number (e.g. a serial number). 

Alternatively, a "fingerprint" of each storage medium may be obtained from 
the location of bad (defect) blocks on the medium, which subsequently can be used as the 
module ID. Since the key is specific to the storage medium, a copy of the content on other 
storage medium can not be decrypted. 
25 However, this approach does not protect against replay attacks, which can be 

seen as follows. Once the content, e.g. audio, is stored on the storage medium, it can be read 
off the storage medium using a non-compliant device, and stored in an archive. The audio 
content can not be played from the archive because it is stored in encrypted form. However, 
as soon as the content on the storage medium has been expired or otherwise become 
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unusable, it can be replaced by a fresh copy from the archive. It is clear that this can be 
repeated indefinitely, and as such methods for copy-protection based on unique ID's as 
described above are not suitable to implement new business models such as rental etc. 

One solution to overcome this problem is to equip the storage medium with a 
5 smart card IC, which controls access to the memory using some authentication protocol (e.g. 
based on public key cryptography). This would prevent a non-compliant device to copy the 
module content to an archive, and subsequently to restore it after the original on the module 
has been expired. However, this may be to costly a solution. In addition, due to the limited 
processing power of such an IC, an authentication protocol based on public key cryptography 
1 0 may result in an unacceptable delay before the audio starts playing. 

It is therefore an object of the invention to provide an improved copy 
protection method and system, in particular against replay attacks, in a simple manner. 

1 5 Now, therefore according to one of its aspects the invention is characterized 

according to the characterizing part of Claim 1, i.e. that the stored data is arranged in sectors, 
a tagging part being associated with each sector, where the tagging part comprises a field 
(S4T) that stores a value which is randomly altered with each write access to said sector, said 
field being read only for external access, and the stored data being encrypted with an 

20 encryption key that is at least in part derived from at least some of said fields (S4T). 

The method and the storage medium architecture in accordance with the 
invention provide a flexible scheme for providing copy protection. The core of the invention 
is that each sector on the storage medium has an associated field (named below the "Secure 
Solid Sate Sector Tag" or S4T) which stores a random number. This random number is 

25 renewed on each write operation to that sector by some preferably dedicated (and in case of 
solid state memory modules preferably on-chip) logic, and can not be modified 
deterministically by devices employing the module. This can be used to prevent replay 
attacks by encrypting the content stored on the medium using a key which is at least in part 
derived from the random numbers associated with the sectors in which it is stored. 

30 The invention also relates to a system arranged for implementing a method as 

claimed in claim 1, a player for playing a recording prepared according to a method as 
claimed in claim 1, and a record carrier prepared according to a method as claimed in claim 
1. Further advantageous aspects of the invention are recited in dependent Claims. 
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These and other objects of the invention will be apparent from and elucidated 
with reference to the embodiments described hereinafter. 
In the drawings: 

5 Figure 1 shows a conceptual two-player arrangement 

Figure 2 illustrates the mechanism of 'replay attacks' in the prior art. 
Figure 3 shows a schematic logic architecture of a memory module 
Figures 4a-4c various examples of a memory module 
Figure 5 a usage example of an S4T value 
10 Figures 6 A and 6B illustrate a further embodiment of the invention. 

Figures 7-1 1 illustrate further embodiments of the method and system in more 

detail. 



1 5 The invention is exemplified below by reference to audio and removable 

random access (solid state) memory modules, but the invention is not limited to audio nor to 
removable random access memory models, it is applicable to any kind of data stored on a 
data storage unit, such as for instance audio, video, text or any combination thereof. It is also 
applicable to storage media and data storage units in general, such as for instance to hard 

20 disks. 

In relation to audio players and related devices it is noted that it is preferred 
that the method protects the interests of the content providers, be it the major record labels or 
small garage bands, yet addresses consumer interests such as convenience, sound quality, and 
privacy. 

25 Figure 1 illustrates a conceptual two-player arrangement, with two players A 

and B, and a module C that may be transposed between the players. As shown, both players 
have appropriate means for inserting the module. 

Basically, two approaches exist for copy protection. The first is to bind the 
audio to a specific player by providing each individual player with a unique, secret, number 

30 that is used as the key for encryption of the audio. Therefore, the audio stored on memory 
modules by one player will play on that player only. Of course, this is very annoying if one 
has multiple players (for instance SSA players). It is required that one is able to play music 
stored on a memory module, regardless of the device used to download it onto the module. 
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What should be prevented is that a user can copy the audio content to another module and be 
able to play from both. 

One known solution is to embed a unique identification code (ID) in the 
memory module, which can be read by the application, but which can not be changed. This 
5 identification code can then be used to generate an encryption key, which is specific for the 
module. 

Another known solution is to make use of defects in the memory modules, 
which naturally occur as a result of the manufacturing processes used to fabricate cheap but 
high storage capacity memories. The locations of these natural defects probably will be 

1 0 unique for each module, and as such can act as a 'fingerprint' of that device. Again, a unique 
key can be generated, which is specific for the module. 

These known solutions do not provide protection against replay attack as will 
be explained in figure 2 below. A 'replay attack' is a form of copying in which a copy is 
made from one system (system 1 ) to another (system 2), where the unauthorized (but 

1 5 unplayable copy) on system 2 can be used to restore a playable copy on system 1 over and 
over again, even after expiration of the original copy. Figure 2 illustrates this in more detail. 
Each system comprises a unique identification number, represented by ID1 for system 1 and 
ID2 for system 2. In this example the data in respect of rights and usage on the original copy 
are encrypted with a key that is derived from ID1 and a secret S. In a 'try-before-you-buy' or 

20 a rental business model, further access to the data is denied after a certain period of time, or 
after a number of uses. In the known system, data on the original system are encrypted with a 
key that is derived from ID1. So copying the data to a system having a unique identification 
code ID2 (second step in figure 2) will not render a usable copy, since the identification code 
does not match the code ID1. However, this copy is exactly (bit-by-bit) the same as the 

25 original. It can at any time be recopied back from system 2 to system 1 and this copy of a 

copy can be used. This enables a fraudulent customer to retain on system 2 a copy that can be 
recopied again and again on system 1 and will be usable. 'Try-before-you-buy'thus has 
become 'try-indefinitely.' Likewise, this scheme can be used to pay once for a rental and 
have a copy for ever. 

30 The method in accordance with the invention herein is relatively inexpensive. 

The basic idea to prevent a replay attack requires to design storage media which enter 
different states, even though the data to be stored are identical. The method is presented using 
an example of a solid state module but is applicable to other kinds of storage modules that 
have some simple control logic built in (e.g. hard disc drives etc.). The invention provides a 
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flexible framework for building a copy protection system, without imposing limitations on 
the usage of the module. 

Current flash memory modules for solid state hard disk and multimedia 
storage applications are organized in 512 byte sectors. Associated with each sector is a tag 
5 area (usually 16 bytes), which is employed to store e.g. a bad block flag, a usage count (to 
implement wear leveling), and error correction information. This data typically is maintained 
by an on-board controller or by the application. In the invention the tag area (or part of the 
tag area) of each sector is extended with a so-called "Secure Solid State Sector Tag," or S4T 
for short or a second or separate tag area is introduced (below also called a S4T). This S4T 
1 0 field will contain a random number, and has the following two basic properties: the random 
number is changed on each write access to the sector by some (preferably on-chip) logic; it 
can not be modified by devices employing the module, i.e. it is read-only for external 
accesses. 

Figure 3 illustrates a schematic logic architecture of a memory module in 

15 accordance with the invention. The S4T field may advantageously and preferably be 

integrated inside the memory chip. As shown, the write data operation to a sector will trigger 
the random number generation RNG, and input the latter together with the data proper 
through an input register and a buffer into main storage. In a read operation, the data proper 
and the value stored in the S4T field will leave through this buffer again. Storage proper has 

20 the sector data, the tag area, and the S4T field. 

Figure 4a-4c illustrate various examples of memory modules. Figure 4a has 
the preferred embodiment with all information combined within the memory chip itself. 
Figure 4b has an external S4T controller. Figure 4c has an external S4T controller, as well as 
an external S4T storage. An initial realization could be to have a memory chip on the module, 

25 alongside with the controller. The latter will generate the random numbers, reserve part of the 
tag area for storing the random numbers, and block write operations to the reserved part of 
the tag area other than those for storing the random numbers. For clarity, no interconnections 
have been detailed. 

The S4T field can be exploited within the framework of the invention to 

30 construct a copy protection system, which is resistant against replay attacks and thus enables 
new business models to be implemented, as follows. The content is stored on the memory 
module in an encrypted form, either using a single key, or using a set of different keys in the 
case of block wise encryption. The rights which have been purchased with the content, and 
the usage information can also be stored on the module. These need not necessarily be 
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encrypted. Finally, the key(s) used to encrypt the content are stored on the module, encrypted - 
with a key that is derived at least in part from the value of the S4T fields of the sectors in 
which the rights and usage information is stored, a secret (e.g. a key that is shared by all or a 
group of players), and optionally or alternatively to the value of the S4T fields of the rights 
5 and usage sectors the values of some or all of the values in the S4T fields of the sectors in 
which the content is stored. 

Preferably the key is derived from at least the value of a sector in which rights 
information and/or a sector in which usage information is stored because preventing copying 
the usage and/or rights information is a very efficient manner of protection. A fraudulent user 

1 0 may attempt not so much to copy all information of a medium, but only the user and/or rights 
information. For instance when a user is allowed to use a recording 1 0 times, he/she could 
make a copy of only the user and/or right information, and after having played the recording 
10 times, attempt a 'replay attack' by only recopying the user and/or rights information. If 
successful the recording may be played yet another 1 0 times etc. 

1 5 Figures 5 illustrates a method in accordance with the invention. Each time data 

are stored in a sector, in its S4T field a randomly chosen number is written. In Figure 5 these 
random numbers are below the sectors indicated by R t , R 2 etc. The data are encrypted with a 
key that is dependent on a secret S and the number Ri or a combination of numbers Rj. 

Making a copy of the data on the memory module will change in a 

20 irreproducible manner the numbers Rj (see Figure 5). In fact such will happen twice. 

Therefore, a recopy of a copy will have data for which the random numbers (Ri'\ R2" etc) 
do not correspond to the arguments required for a proper decryption of the data. 
Subsequently, the encryption key can no longer be recovered and the copy of the copy cannot 
be decrypted and is useless. Any 'replay attack' is prevented. 

25 To expand on this description, an exact bit copy of the audio content can be 

made to an intermediate storage device (e.g. a PC hard disk) since there are no restrictions 
whatsoever to reading the memory. However, this copy is unusable because it is encrypted 
with a key that can not be obtained because the secret is unknown to non-compliant 
applications. On each play back of the audio content, the usage information is updated and 

30 checked against the rights. If the content has not been expired, the updated information is 
stored in the memory, and the key(s) used to encrypt the content are re-encrypted using the 
new value S4T fields of the sectors in which the rights and usage information is stored. Now 
suppose that the audio content has been expired, and the bit copy has been placed back in 
memory. The result is not an exact bit copy, because the values in the S4T fields have been 
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changed randomly on each write access to the memory. Therefore, the player will fail to - 
recover the key(s) used to encrypt the audio content, since this requires the original values of 
the S4T fields (which are on the intermediate storage device, but can not be placed back in 
the memory module). Accordingly, the replay attack fails. 
5 A further potential attack would be to change the rights and usage information, 

which may have been stored in the clear (i.e. not encrypted). Again, the value of the S4T 
field of the sectors in which this information is stored will be irrevocably changed, thus 
rendering recovery of the key(s) used to encrypt the content impossible. Again, the attack 
fails (even if the rights and usage information is stored in the clear). 

10 Figure 6 A illustrates a usage example of an S4T value in line with the above, 

with the sector data, the tag area data, and the random numbers Ri. On each playback of the 
content, the usage information is updated and checked against the rights. If the content has 
not been expired, the information is updated and re-stored and the key(s) used for content 
encryption re-encrypted using the new values of the S4T fields of the sectors in which the 

15 rights and usage information are stored. The content is encrypted with a secret key K. The 
encryption key K itself is stored after encryption with a key K\ that is the result of a hash 
function H taking the S4T values Ri, .. R n +2 and the secret S as arguments. K may be 
multiple. 

If the content is copied and recopied, the player will fail (as in the method 
20 illustrated in figure 5) to recover the keys because K* is changed in an intractable manner. 

This is schematically indicated in figure 6B. Accordingly any replay attack fails. The method 
does not necessitate the use of a unique identification code. 

Thus copying is prevented in an inexpensive manner requiring only moderate 
processing facilities. It is noted that the invention provides the possibility of constructing a 
25 copy protection system without the need to use an unique identification code. This does not 
exclude the use of such a code for other reasons or for extra protection. 

The embodiment shown in figure 5 in which each sector is encrypted with a 
key having different arguments, said arguments being formed by a number or a set of number 
Ri, has the advantage that each sector has its own separate key. Immediately after the said 
30 number has become available decryption can be commenced, thus decryption can be done 

fast. The embodiment shown in figures 6 and 7 is, having a common key, which is dependent 
on the total set of random numbers. Decryption can only commence after all random numbers 
have been generated. This makes this method, compared to the first mentioned relatively 
slower, but because a larger set of random numbers is used, relatively safer. 
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It is also possible to arrange the data in groups of sectors, and groups of 
sectors having associated with it a random number Rj. The same schemes as above may be 
used for groups of sectors, instead of sectors. 'Random numbers' within the concept of the 
invention in its broadest sense means numbers which for all due purposes cannot be predicted 
5 in advance. 'Numbers' is to be broadly interpreted and may include any set of parameters 
from which a random choice is made. 'For all due purposes' is stated since to obtain random 
numbers usually some kind of algorithm is used. Although preferably the method is applied 
to all or substantially all data on the memory module, the invention encompasses 
embodiments in which the method is applied to only a part of the data on the memory 

10 module. This could for instance be advantageous from the point of view of speed of 

operation. The invention is not restricted to using one and only one encryption method. If the 
data are divided in groups, embodiments using different encryption methods and different 
ways of deriving keys from the random numbers in the S4T fields for said encryption 
methods may be used for different groups. This reduces the risk of unauthorized decryption. 

15 Although the controller may be provided in the system apart from the memory module, 

preferably the controller unit by which the random numbers (RNG) are chosen is integrated 
in the memory module. This makes it difficult to circumvent the method or to influence the 
generation of the random numbers. 

The embodiment shown in figure 5 in which each sector is encrypted with a 

20 key having different arguments, said arguments being formed by a number or a set of number 
Ri, has the advantage that each sector has its own separate key. This makes unauthorized 
decryption very difficult. The embodiment shown in figures 6 and 7 is, having a common 
key, relatively simpler which simplifies authorized decryption. 

In short the invention may be described as follows: 

25 In a method for providing copy-protection services on a storage medium (for 

instance a solid state memory module), the data are arranged in sectors to which a field (S4T) 
is associated, where said field contains a random value Rj which is changed randomly when 
writing data to said sector. By encrypting the data stored on the medium using a key which 
depends critically on said random numbers, bit-by-bit copies (apart from said random 

30 numbers, which can not be deterministically changed by an application) to a second storage 
medium or recopies from some intermediate storage medium, can not be decrypted because 
the values of said random numbers will have changed, thus preventing unauthorized 
duplication and replay attacks. 
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CLAIMS: 



Method for providing copy-protection services on a data storage medium, characterized in 
that the stored data is arranged in sectors, a tagging part being associated with each sector, 
where the tagging part of said sector comprises a field (S4T) that stores a value Rj which is 
randomly altered with each write access to said sector, said field being read only for external 
5 access, and the stored data being encrypted with an encryption key that is at least in part 
derived from values of at least some of said fields (S4T). 

2. Method as claimed in claim 1 5 characterized in that the data storage medium is 

a removable memory module. 



3. Method as claimed in claim 1, characterized in that the encryption key is 
derived from the values of said S4T fields associated with sectors in which rights and/or 
usage information is stored. 

4. Method as claimed in claim 3, characterized in that the encryption key is in 
addition derived from values of said S4T fields associated with sectors in which the content 
is stored. 



10 



5 - System arranged for implementing a method as claimed in claim 1 comprising 

20 a controller unit for choosing the values at random. 



6. 



Player for playing from a data storage unit prepared according to a method as 



claimed in claim 1 . 



25 



7- Data storage medium prepared according to a method as claimed in claim 1 

comprising a controller unit for choosing the random values. 
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